requarks / wiki-v1

Legacy version (1.x) of Wiki.js
https://wiki.js.org
GNU Affero General Public License v3.0
100 stars 75 forks source link

Access deny on path does not work #225

Open supareno opened 5 years ago

supareno commented 5 years ago

Access deny on path does not work when typing the path in browser

Steps to reproduce the behavior

  1. Create a page named 'foo'
  2. Deny access to this path on the admin console to user X
  3. Log to wikis with user X
  4. New page is not accessible in the left menu
  5. Type the url in the browser (http://localhost:3000/foo)
  6. 'Foo' page is now visible

Expected behavior The 'foo' page is not visible from the menu and must not be viewable by a user which has a 'deny' access to this path when the user type/paste the url in the browser

Host Info (please complete the following information):